apellov3[.]app

PhishDestroy identifies apellov3.app as an active credential-harvesting domain designed to trick users into surrendering login credentials under the guise of a legitimate service. The site presents a default web server landing page while operating as a frontend for a phishing kit that mimics a login interface, likely targeting victims with stolen passwords or multi-factor tokens. Security telemetry shows this domain resolves to IP 172.67.152.68 and has been flagged by only 2 out of 95 VirusTotal security vendors, indicating a low initial detection rate despite active phishing behavior. This domain was flagged through PhishDestroy’s seed 9d3aab after domain registration analysis revealed a recent creation date of August 30, 2025, and hosting through NICENIC INTERNATIONAL GROUP CO., LIMITED. The SSL certificate issued by Google Trust Services adds a false veneer of legitimacy, but the mismatch between the default web page title and the phishing payload underscores the deceptive nature of the site. With minimal blocklist coverage at 2/95 on VirusTotal and a newly registered domain, apellov3.app poses an elevated risk to unsuspecting users seeking timely updates or services. Users who visited apellov3.app should immediately change any passwords entered on the site and enable multi-factor authentication on all linked accounts. Scan local devices for malware using a reputable antivirus tool and review account activity for suspicious logins. Report the domain to your security team or platform provider to aid in takedown efforts. Avoid re-engaging with this domain and verify any unexpected login prompts through official channels.